Add LDAP User

Overview

The Add LDAP User page allows administrators to import one or more users from a configured LDAP directory.

Unlike internal users, LDAP users are authenticated through the configured LDAP server. Before using this feature, at least one LDAP integration must already be configured in the system.

Each imported user is assigned to the system using the selected LDAP configuration and group. After the user is created, the account is assigned the system's default namespace. No additional permissions are granted automatically.

Access Requirements

To access this page, the user must either have Administrator privileges or the CREATE permission for the Users module.

The CREATE permission allows users to create new user accounts. Users without administrator privileges or the required permission cannot access this page.

Users without the required authorization will receive the following error:

Access Denied

You don't have access to this resource.

Authorization

• Users Module - Users
• Users Module - Groups

Prerequisites

Before importing LDAP users, ensure that:

• You have administrator privileges.
• At least one LDAP integration has been configured.
• The LDAP server is accessible.
• The username exists in the selected LDAP directory.
• At least one group has been configured in the system.

User Information

The following information must be provided for each LDAP user.

Adding Multiple Users

The page supports importing multiple LDAP users in a single operation.

Click Add Another User to add a new row to the form.

Each row represents a separate LDAP user that will be processed when the form is submitted.

Import Process

To import LDAP users:

1. Open the Add LDAP User page.
2. Select an LDAP configuration.
3. Enter the LDAP username.
4. Select the appropriate group.
5. Repeat the process using Add Another User if additional users need to be imported.
6. Click Save.

Save Behavior

When Save is clicked, every row is validated independently.

• Users that pass validation are successfully imported into the system.
• Users that fail validation are not imported.
• A validation error is displayed for each failed row.
• Successfully imported users are not affected by rows containing errors.

This allows administrators to correct only the invalid entries without recreating the successfully imported users.

Validation

The following validations are performed for each row:

• An LDAP configuration must be selected.
• Username is required.
• The username must exist in the selected LDAP directory.
• A group must be selected.

If any validation fails, the corresponding row enters an Error state.

Error Handling

Rows that fail validation remain on the page after the save operation.

For each failed row:

• The row is marked with an Error state.
• Validation details are displayed.
• The Delete Row action becomes available, allowing administrators to remove the invalid row from the form.

Administrators can either:

• Correct the invalid information and save again.
• Remove the failed row and continue with the remaining users.

Default Behavior

For every successfully imported LDAP user:

• The account is created using the selected LDAP configuration.
• The user is assigned to the system's default namespace.
• No resource permissions are assigned automatically.
• The user is created as a standard (non-administrator) user.

Administrator privileges and additional permissions can be assigned later.

Notes

• LDAP users can only be imported from configured LDAP integrations.
• Importing users does not automatically assign resource permissions.
• Authentication is performed through the LDAP server.
• Users without assigned permissions cannot access system resources after being imported.

Related Documentation

• Users Module
• LDAP Integration
• Permissions
• Authentication